Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AADCE8A366111F1B778510DCF1D38B0.roa
File: 5AADCE8A366111F1B778510DCF1D38B0.roa (raw, json)
Hash identifier: e+gCpuN7pjSAqyJj9/3bTAZYZGeF5J9B8OK1OAlM5bE=
Subject key identifier: C1:4E:15:75:6F:5E:87:4C:E0:D1:57:64:30:77:ED:1B:BE:B6:79:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AADCE8A366111F1B778510DCF1D38B0.roa
Signing time: Sun 12 Apr 2026 11:18:39 +0000
ROA not before: Sun 12 Apr 2026 11:18:34 +0000
ROA not after: Thu 12 Apr 2029 11:18:34 +0000
asID: 17561
IP address blocks: 154.95.188.0/24 maxlen: 24
154.95.189.0/24 maxlen: 24
154.95.190.0/24 maxlen: 24
154.95.191.0/24 maxlen: 24
154.95.192.0/24 maxlen: 24
154.95.193.0/24 maxlen: 24
154.95.194.0/24 maxlen: 24
154.95.195.0/24 maxlen: 24
154.95.196.0/24 maxlen: 24
154.95.197.0/24 maxlen: 24
154.95.198.0/24 maxlen: 24
154.95.199.0/24 maxlen: 24
154.95.200.0/24 maxlen: 24
154.95.201.0/24 maxlen: 24
154.95.202.0/24 maxlen: 24
154.95.203.0/24 maxlen: 24
154.95.204.0/24 maxlen: 24
154.95.205.0/24 maxlen: 24
154.95.206.0/24 maxlen: 24
154.95.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115906 (0x1c4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 11:18:34 2026 GMT
Not After : Apr 12 11:18:34 2029 GMT
Subject: CN=69db7f8f-a041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e6:4f:08:4f:9a:b6:14:95:61:59:d5:76:14:
4c:f7:98:6a:f2:c8:5e:ff:96:1f:7d:66:7f:47:6b:
b4:b0:45:18:f0:a8:67:46:a0:20:1e:3f:35:e1:0e:
a6:e3:b4:82:75:32:ed:bb:59:00:4a:fa:9b:67:26:
d5:5b:e0:c0:f1:f9:5d:5f:27:d0:84:4d:b0:5d:2c:
64:d0:ba:8a:f5:e3:6e:c8:56:6d:b2:06:86:b3:70:
47:75:3d:7a:17:b1:98:d5:fc:eb:3b:ef:e5:78:ef:
76:93:e9:7a:f1:75:66:00:ff:0a:38:c7:9b:9c:fd:
77:69:1e:51:26:ec:c2:59:51:eb:cb:8e:39:09:b5:
f1:d4:63:f1:43:10:28:2d:07:b0:5e:31:10:7c:83:
46:0e:62:a2:84:98:72:45:94:fe:27:2a:5a:2d:f9:
2e:d5:bb:fd:a1:b6:7a:6b:a5:f0:3d:9d:5e:56:e2:
65:a9:fd:99:b8:d9:b8:46:9a:1d:73:bd:d5:79:2b:
25:97:ee:b4:3b:c6:78:83:5a:48:88:dd:e5:cb:6c:
37:da:20:7d:69:2d:a8:80:6b:09:36:b6:af:9f:96:
6c:ec:63:c5:12:4b:9c:63:cb:8f:2b:58:1a:aa:21:
08:09:0c:0f:45:93:9b:c6:70:5a:5e:d7:d5:a2:44:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:15:75:6F:5E:87:4C:E0:D1:57:64:30:77:ED:1B:BE:B6:79:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AADCE8A366111F1B778510DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.188.0-154.95.207.255
Signature Algorithm: sha256WithRSAEncryption
5b:b3:ed:09:fd:e8:f9:f7:dc:69:d8:cd:bf:e7:b1:41:f7:d0:
af:ea:09:f4:53:5e:0d:f1:aa:e2:56:1d:ab:c7:72:1b:01:da:
96:3a:2e:b2:51:7f:8f:e6:b6:82:18:63:88:48:2f:39:cd:f8:
03:a1:56:35:1a:37:02:03:69:81:15:69:67:72:44:4e:11:d9:
17:bc:75:26:35:14:96:88:c7:4a:d5:29:c4:88:10:a8:88:e2:
62:03:e2:01:bd:ff:fd:55:00:ad:f7:37:4c:09:7b:69:1a:2b:
a5:9b:cd:ee:99:1a:8d:8f:c9:c7:d8:46:9e:bd:6b:ae:e1:2b:
a9:ef:53:33:fd:70:25:ff:42:90:0f:85:12:d5:36:0d:ad:d2:
bf:74:10:cb:b1:7d:08:32:7d:a3:bd:b2:eb:d0:3d:57:ef:b9:
d9:6f:65:9e:7b:0c:e6:27:35:fe:0a:0a:e1:f1:e4:06:0c:df:
1f:71:01:5a:d0:b6:55:3d:68:b4:83:75:ba:53:42:30:5d:27:
ee:2a:30:7d:5e:cb:e7:7f:36:d9:23:c3:40:82:d4:12:2a:98:
f2:e5:2d:7c:84:1a:e3:8b:cc:0c:24:20:ab:79:4b:2f:00:50:
60:51:ad:5d:52:d5:f5:8c:5a:99:ee:aa:e2:29:50:98:09:5a:
f0:2c:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:57 2026 by rpki-client